CVE-2018-2306

CVE-2018-2306 is rejected/not used; the candidate was not assigned to issues in 2018.

CVE-2018-2306

...

CVE-2016-2306

CVE-2016-2306 affects Ecava IntegraXor HMI web server prior to version 5.0, build 4522. The root cause is cleartext transmission of sensitive information over the network, enabling remote attackers to sniff unencrypted data. The vulnerability has been confirmed in multiple sources and is associat...

Ubuntu: Security Advisory (USN-2306-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2328-1: GNU C Library vulnerability

Tavis Ormandy and John Haxby discovered that the GNU C Library contained an off-by-one error when performing transliteration module loading. A local attacker could exploit this to gain administrative privileges. CVE-2014-5119 USN-2306-1 fixed vulnerabilities in the GNU C Library. On Ubuntu 10.04...

Ubuntu 14.04 LTS : GNU C Library vulnerabilities (USN-2306-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2306-1 advisory. Maksymilian Arciemowicz discovered that the GNU C Library incorrectly handled the getaddrinfo function. An attacker could use this issue to cause a denia...

Oracle Linux 4 / 5 : oracle-validated (ELSA-2011-2031)

Description of changes: - Fix for security bug CVE-2011-2306 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2011-2031. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2013-2306

The CVE-2013-2306 vulnerability affects jigbrowser+ for Android prior to version 1.6.4. The issue arises when opening a new window, which allows remote attackers to spoof the address bar via a crafted web site, enabling phishing-like deception by forging the displayed URL. Public references consi...

CVE-2012-2306

SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-2306

The CVE-2012-2306 entry concerns the Drupal Addressbook contributed module, affected in 6.x-4.2 and earlier. The root cause is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact is described as potential partial confidentia...

CVE-2011-2306

CVE-2011-2306 affects Oracle Linux 4 and 5 via the oracle-validated component. The NVD description notes an unspecified vulnerability allowing remote authenticated users to compromise confidentiality and integrity through unknown vectors related to “Oracle validated.” The connected Nessus entry (...

Debian: Security Advisory (DSA-2306-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2306-1 : ffmpeg - several vulnerabilities

Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3908 FFmpeg before 0.5.4, allows remote attackers to cause a denial of service memory corruption and...

CVE-2010-2306

The CVE-2010-2306 entry concerns the default installations of Sourcefire 3D Sensor 1000/2000/9900 and Defense Center 1000 sharing the same static private SSL keys across devices/installations. This key reuse enables a remote attacker to perform a man-in-the-middle and decrypt SSL traffic. The pro...

CVE-2009-2306

The CVE-2009-2306 issue affects the ARD-9808 DVR card security camera. The vulnerability arises from storing sensitive information under the web root with insufficient access control, enabling remote attackers to download a file (dvr.ini) containing usernames and passwords via a direct request. N...

CVE-2009-2306

creationtimestamp| type| source ---|---|--- 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9066...

CVE-2008-2306

Apple Safari for Windows before 3.1.2 is vulnerable to bypassing access restrictions via IE URLAction URLACTION_SHELL_EXECUTE_HIGHRISK, which can cause automatic download and execution of arbitrary files. Multiple sources (NVD CVE-2008-2306) indicate a high-severity issue with CVSS 9.3 (AV:N/AC:M...

WinVNC Web Server GET Overflow

This module exploits a buffer overflow in the AT WinVNC version 'WinVNC Web Server GET Overflow', 'Description' = %q This module exploits a buffer overflow in the AT&T WinVNC version 'aushack', 'License' = MSFLICENSE, 'References' = 'BID', '2306' , 'OSVDB', '6280' , 'CVE', '2001-0168' , ,...

CVE-2002-2306

The vulnerability CVE-2002-2306 affects Sharman Networks KaZaA Media Desktop 1.7.1. It allows remote attackers to cause a Denial of Service by sending several large messages, leading to CPU consumption on the affected host. The available documents identify the affected software and the impact (av...

CVE-2007-2306

Multiple cross-site scripting XSS vulnerabilities in the Virtual War VWar 1.5.0 R15 and earlier module for PHP-Nuke, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 memberlist parameter to extra/login.php and the 2 title parameter to...